I have a dedicated browser (Firefox) profile that I use for accessing online banking systems (and only for that). The current setup is (summarising) as follows:
- I have it set to clear all history and cookies when closing the browser.
- I have a master password set up to protect saved passwords (in addition to all my browser profiles being separately encrypted).
- I have bookmarked all the banking sites that I want to use (so I never have to google them or anything of the sort).
- I have the cookie whitelist extension, so that I don't get any cookies I don't explicitly allow.
- I have NoScript, so that only the sites I allow can run any scripts.
- I have Self-Destructing Cookies, so that the cookies erase themselves after I close their tabs.
- I have RememberPass, so that I can save passwords even in those sites that won't let me.
- I don't keep the passwords online, I only copy them between computers offline via an encrypted file on a USB stick/via local network/manually.
One thing I have an obvious problem with are those silly sites that have me input only select characters from the password. The only way I see to type those in with extreme hassle is to have an encrypted file with numbered characters in each password, but that is still a bit of a hassle and doesn't feel as secure as I'd like it to be (in particular, I have the text file open on my screen and I have to painstakingly input every character, which might leave me open to shoulder surfing if I'm less careful).
So the question is: are there any obvious ways in which I can improve the setup (without crippling usability, I'm not that rich or paranoid)? Perhaps there is another browser better suited for the job, or some extensions that might help with security or usability (see esp. the previous paragraph)?
I use similar profiles in both Linux and Windows.
any obvious ways in which I can improve the setup
how do you feel about VMs?